US7443865B1 - Multiple network connections from a single PPP link with network address translation - Google Patents
Multiple network connections from a single PPP link with network address translation Download PDFInfo
- Publication number
- US7443865B1 US7443865B1 US10/117,801 US11780102A US7443865B1 US 7443865 B1 US7443865 B1 US 7443865B1 US 11780102 A US11780102 A US 11780102A US 7443865 B1 US7443865 B1 US 7443865B1
- Authority
- US
- United States
- Prior art keywords
- network
- packet
- network address
- destination
- user
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active, expires
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L12/00—Data switching networks
- H04L12/66—Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
Definitions
- the present invention relates to the field of computer networks. More particularly, the present invention relates to managing multiple network connections from a single PPP link while performing network address translation.
- the Point-to-Point protocol is a data link protocol that provides dial up access over analog or digital transmission lines.
- PPP provides many advanced features, including error detection, support of multiple protocols, negotiation of IP addresses at connection time, and authentication.
- the second is a link control protocol for bringing lines up, testing them, negotiating options, and bringing them down again when they are no longer needed. This is known as the Link Control Protocol (LCP).
- LCP Link Control Protocol
- the third is a way to negotiate network layer options in a way independent of the network layer protocol to be used. Thus, the method chosen may have a different Network Control Protocol (NCP) for each network layer supported.
- NCP Network Control Protocol
- PPP is commonly used as the data link protocol between a user and an Internet Service Provider (ISP) or access point. This is usually accomplished through the following method.
- the personal computer of the user by is instructed to call the ISP through a modem.
- the ISP's modem receives the call and establishes a physical connection, the personal computer sends a series of LCP packets in the payload field of one or more PPP frames. These packets, and their responses, comprise the negotiation of the session, and set the PPP parameters to be used during the session.
- NCP packets are sent to configure the network layer.
- the personal computer wants to run a TCP/IP protocol stack, so it needs an IP address.
- the NCP for IP may then be used to assign an IP address to the user (dynamic assignment of IP addresses is now common for dial-up users).
- the personal computer has become an Internet host and may send and receive IP packets, just as a hardwired host could.
- NCP is used to tear down the network layer connection and free the IP address.
- the LCP is then used to shut down the data link layer connection. Finally, the personal computer hangs up the modem, releasing the physical layer connection.
- LCP packets There are currently eleven types of LCP packets. These types are illustrated in Table 1 below, along with the direction in which they travel (from Initiator (I) to responder (R) or vice-versa) and their description.
- Intranets have been rising in popularity, especially with large companies.
- An intranet is an internal network that serves only a specific type of person (such as employees of a corporation, or students at a school).
- the intranet is usually not accessible to the general public.
- Intranets have become popular mainly because they allow for much more productive communication between users within the network,
- FIG. 1 is a block diagram depicting the typical connection to an intranet.
- Personal computer 10 connects through a link 12 to an Internet service provider (ISP) or access point (AP) 14 .
- ISP Internet service provider
- AP access point
- the ISP or AP 14 then connects through link 16 to the Intranet 18 .
- FIG. 2 is a block diagram illustrating a connection to the Internet 62 through an intranet 58 .
- a user at PC 50 maintains a PPP connection 52 to ISP 54 , which is connected to the intranet 58 .
- Intranet 58 is then connected through link 60 to the Internet 62 .
- the drawback of this solution is that the traffic from the user at PC 50 to the Internet 62 passes through the intranet 58 . This increases the traffic traveling through the intranet 58 and poses a security risk to the information sent via the intranet 58 .
- PPP Planar Packet Control Protocol
- Multiple simultaneous network connections from a single PPP connection may be accomplished by utilizing a gateway in the following manner.
- a first network connection is established between the gateway and a first network.
- a first real network address for the user is then received, the first real network address assigned by the first network.
- the gateway may establish a network session between the gateway and a second network and receive a second real network address for the user, the second real network address assigned by the second network.
- a virtual network address may be assigned to the user for network address translation purposes. Additional network connections may be added in a similar manner. Network address translation is then performed on packets traveling between the user and any of the network sessions. This allows each of the simultaneous network connections to gain the benefits of network address translation.
- FIG. 1 is a block diagram depicting a typical connection to an intranet.
- FIG. 2 is a block diagram illustrating a connection to the Internet through an intranet.
- FIG. 3 is a diagram illustrating the use of a gateway to couple multiple networks in accordance with a presently preferred embodiment of the present invention.
- FIG. 4 is a flow diagram illustrating a method for establishing multiple network connections for a user having a PPP connection to a gateway according to presently preferred embodiment of the present invention.
- FIG. 5 is a block diagram illustrating multiple network connections from a single PPP connection as they would appear after the steps depicted in FIG. 4 were executed in accordance with a presently preferred embodiment of the present invention.
- FIG. 6 is a block diagram illustrating a network gateway for use in a system having a user with a PPP connection to a gateway in accordance with a presently preferred embodiment of the present invention.
- FIG. 7 is a flow diagram illustrating a method for outgoing communications routing in a system in which a user is connected to a first network and a second network according to a presently preferred embodiment of the present invention.
- FIG. 8 is a diagram illustrating a packet in accordance with the IP protocol.
- FIG. 9 is a flow diagram illustrating a method for incoming communications routing of in a system in which a user is connected to a first network and a second network according to a presently preferred embodiment of the present invention.
- FIG. 10 is a block diagram illustrating a network gateway according to another embodiment of the present invention.
- the components, process steps, and/or data structures are implemented using a gateway device.
- Different implementations may be used and may include other types of operating systems, computing platforms, computer programs, and/or general purpose machines.
- devices of a less general purpose nature such as hardwired devices, devices relying on FPGA or ASIC technology, or the like, may also be used without departing from the scope and spirit of the inventive concepts disclosed hereinwith.
- a method for making multiple network connections with network address translation is provided. This method may be executed by a gateway.
- a gateway is a device which performs protocol conversion between different types of networks or applications.
- the term gateway is not meant to be limited to a single type of device, as any device, hardware or software, that may act as a bridge between the user and the networks may be considered a gateway for purposes of this application.
- FIG. 3 is a diagram illustrating the use of a gateway to couple multiple networks.
- Computer 80 connects to gateway 82 through a modem 84 , while computers 86 a and 86 b couple to a hub 88 , then through modem 90 to gateway 82 .
- Gateway 82 may then interface computers 80 , 86 a, and 86 b to multiple networks. These may include a first corporate intranet 92 , a second corporate intranet 94 , and the Internet 96 .
- NAT network address translation
- IP Internet Protocol
- Gateway is a device that acts as an interface between the ISP and the intranet or Internet.
- the Gateway will act to convert the destination addresses of incoming packets and source addresses of outgoing packets so that traffic is directed to the correct address.
- Network address translation provides two main advantages. First, it adds security to the LAN or intranet, as it acts as a type of firewall, preventing users from outside the LAN or intranet from determining the internal network addressing scheme of the LAN or intranet. Second, it saves network addresses. With the ever growing popularity of the Internet and computer networks, a major issue is the availability of IP addresses. A standard IP address is 32 bytes in length, providing a total of 2 32 possible IP addresses. Those of ordinary skill in the art will readily recognize that not all of these possible IP addresses are available due to administrative expediencies, such as reserving blocks of IP addresses for future use. Network address translation saves IP addresses by allowing the ISP to use IP addresses internally that may be used by other networks on the Internet because there is no possibility of conflict.
- FIG. 4 is a flow diagram illustrating a method for establishing multiple network connections for a user having a PPP connection to a gateway according to presently preferred embodiment of the invention. This method may be executed by a gateway.
- a first network session is established between the user and the first network.
- the connection does not have to be PPP, but may be any other communications standard.
- a first real network address is received for the user. This first real network address is assigned by the first network.
- the gateway may establish a second network session between the gateway and a second network.
- a second real network address for the user is received, the second real network address assigned by the second network. this may or may not require an action to be taken by the gateway when the connection is established.
- Some forms of network address translation require that a NAT table be maintained. In such instances, the gateway may assign the user a virtual network address according to a network address translation allocation scheme and store the virtual network address in a NAT table in an entry corresponding to the real network address received from the network being connected.
- Some forms of network address translation involve simply applying the network address translation scheme to each packet as it is received. In such instances, not steps need to be taken by the gateway until a packet is received.
- FIG. 5 is a block diagram illustrating multiple network connections from a single PPP connection as they would appear after the steps depicted in FIG. 4 were executed.
- PC 150 maintains the PPP connection to the ISP 154 , which may contain the gateway.
- First network session 156 links the gateway to the first network 158 , while second network connection 160 connects the gateway to the second network.
- the gateway may configure more than two network sessions should the user so desire. These additional network sessions are created in a similar fashion to the other network sessions.
- Tunneling allows two hosts on the same type of network to communicate even though there may be different types of network in between. Tunneling is accomplished by encapsulating packets sent from a first type of network within packets of a type compatible with a second type of network for the duration of the packet's journey through the second type of network. Then, the outer packet is stripped off (and possibly some demultiplexing takes place) when the packet reaches the first type of network again.
- Layer Two Tunneling Protocol (L 2 TP) is a specific tunneling protocol that acts as an extension of the PPP protocol to allow ISPs to operate virtual private networks. L 2 TP or any other tunneling protocol may be used when establishing the network sessions.
- FIG. 6 is a block diagram illustrating a network gateway for use in a system having a user with a PPP connection to the gateway.
- User 170 has a PPP connection to gateway 172 .
- the gateway 172 then contains many parts that interface the user 170 to multiple networks.
- a PPP session initiator 174 establishes a first PPP session between the gateway and a first network.
- a network address receiver 176 receives a first real network address for the user, the first real network address assigned by the first network.
- the PPP session initiator 174 further establishes a second PPP session between the gateway and a second network.
- the network address receiver further receives a second real network address for the use, the second real network address assigned by the second network.
- a network address allocator 178 assigns the user a virtual network address.
- a NAT table storer 180 stores the virtual network address is a NAT table 182 in an entry 184 corresponding to the first real network address, and stores said virtual network address in the NAT table 180 in an entry 184 corresponding to the second real network address.
- FIG. 7 is a flow diagram illustrating a method for outgoing communications routing in a system in which a user is connected to a first network and a second network according to a presently preferred embodiment of the invention.
- FIG. 8 is a diagram illustrating a packet in accordance with the IP protocol. Normally, there will be a destination network address field 232 within the packet 230 . The destination network address may then be extracted from this field. Then the address may be compared with a routing table. This routing table may be maintained by the gateway or a router. The routing table contains a list of addresses and the corresponding networks to which packets sent to that address should be routed. This allows the gateway to forward the packets to the correct network. In many cases, routing the packets to either network will allow the packet to arrive at its destination.
- the routing table may indicate the network that will provide for the shortest travel time for the packet, in order to save the user some time.
- it will not be clear to which network to send the packet (indicated by the fact that there is no entry for the address in the routing table). In these eases, a default network will be established to which to send packets.
- network address translation is performed (perhaps by applying a network address translation mapping scheme to the packet or perhaps by looking up the destination real address in a NAT table) to arrive at a real destination address.
- the packet is then forwarded to the appropriate network.
- a similar scheme may be utilized when there are more than two simultaneous network connections, with NAT being performed on each network connection.
- FIG. 9 is a flow diagram illustrating a method for incoming communications routing of in a system in which a user is connected to a first network and a second network.
- a packet is received from the first network or the second network.
- network address translation is performed on the packet. Then the packet is forwarded to the user at step 254 .
- FIG. 10 is a block diagram illustrating a network gateway according to another embodiment of the present invention. The components of this gateway may be combined with the gateway depicted in FIG. 5 for use as one complete gateway.
- a packet receiver 300 receives a packet sent by the user.
- a packet examiner 302 examines the packet to determine if its destination is the first network or the second network.
- a network address translator 304 performs network address translation on the packet.
- a packet forwarder 306 forwards the translated packet to the first network or the second network, depending upon the packet's destination.
- the packet examiner 302 may contain a network address extractor 308 , which extracts a destination network address from the packet, a routing table searcher 310 , which looks up the destination network address in a routing table, and a network determiner 312 , which determines that the destination is the first network or the second network based upon the listing for the destination network address in the routing table.
- the network determiner 312 may further determine that the destination is the first network or second network based upon a default setting if the destination network address is not listed in the routing table.
- the packet receiver 300 may further receive a second packet, the second packet sent from said first network or said second network.
- the network address translator 304 may further perform network address translation on said second packet.
- the packet forwarder 306 may further forward said second packet to the user.
- This invention allows for the simultaneous connection to two or more network s from only one single PPP connection. It also allows for networks to be added at the time the user requests connection, such that the networks do not need to be preconfigured. All of the benefits of networks address translation may be realized on each of the simultaneous network connections. Additionally, an increase in security is provided in that traffic to networks travel directly to the gateway rather than through one of the other simultaneously connected networks.
Abstract
Description
TABLE 1 | ||
Name | Direction | Description |
Configure-request | I → R | List of proposed options and values |
Configure-ack | I ← R | All options are accepted |
Configure-nak | I ← R | Some options are not accepted |
Configure-reject | I ← R | Some options are not negotiable |
Terminate-request | I → R | Request to shut down the line |
Terminate-ack | I ← R | OK to shut down the line |
Code-reject | I ← R | Unknown request received |
Protocol-reject | I ← R | Unknown protocol received |
Echo-request | I → R | Please send this frame back |
Echo-reply | I ← R | Here is the frame back |
Discard-request | I → R | Discard this frame (for testing) |
even when the users are dispersed over a wide geographic area (such as in multi-national corporations).
Claims (35)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US10/117,801 US7443865B1 (en) | 2002-04-04 | 2002-04-04 | Multiple network connections from a single PPP link with network address translation |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US10/117,801 US7443865B1 (en) | 2002-04-04 | 2002-04-04 | Multiple network connections from a single PPP link with network address translation |
Publications (1)
Publication Number | Publication Date |
---|---|
US7443865B1 true US7443865B1 (en) | 2008-10-28 |
Family
ID=39874350
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US10/117,801 Active 2025-04-08 US7443865B1 (en) | 2002-04-04 | 2002-04-04 | Multiple network connections from a single PPP link with network address translation |
Country Status (1)
Country | Link |
---|---|
US (1) | US7443865B1 (en) |
Cited By (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20050015496A1 (en) * | 2003-07-14 | 2005-01-20 | Microsoft Corporation | Virtual connnectivity with local connection translation |
US20050015427A1 (en) * | 2003-07-14 | 2005-01-20 | Microsoft Corporation | Virtual connectivity with subscribe-notify service |
US20110085552A1 (en) * | 2009-10-14 | 2011-04-14 | Electronics And Telecommunications Research Institute | System and method for forming virtual private network |
US9021133B1 (en) * | 2013-06-25 | 2015-04-28 | Google Inc. | Fabric network |
Citations (67)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US4922486A (en) | 1988-03-31 | 1990-05-01 | American Telephone And Telegraph Company | User to network interface protocol for packet communications networks |
US5136580A (en) | 1990-05-16 | 1992-08-04 | Microcom Systems, Inc. | Apparatus and method for learning and filtering destination and source addresses in a local area network system |
US5241594A (en) | 1992-06-02 | 1993-08-31 | Hughes Aircraft Company | One-time logon means and methods for distributed computing systems |
US5274631A (en) | 1991-03-11 | 1993-12-28 | Kalpana, Inc. | Computer network switching system |
US5280480A (en) | 1991-02-21 | 1994-01-18 | International Business Machines Corporation | Source routing transparent bridge |
US5423002A (en) | 1992-04-20 | 1995-06-06 | 3Com Corporation | System for extending network resources to remote networks |
US5430715A (en) | 1993-09-15 | 1995-07-04 | Stratacom, Inc. | Flexible destination address mapping mechanism in a cell switching communication controller |
US5555244A (en) | 1994-05-19 | 1996-09-10 | Integrated Network Corporation | Scalable multimedia network |
US5570361A (en) | 1992-02-19 | 1996-10-29 | Fujitsu Limited | Apparatus and a method for supervising and controlling ATM traffic |
US5583862A (en) | 1995-03-28 | 1996-12-10 | Bay Networks, Inc. | Method and apparatus for routing for virtual networks |
US5592470A (en) | 1994-12-21 | 1997-01-07 | At&T | Broadband wireless system and network architecture providing broadband/narrowband service with optimal static and dynamic bandwidth/channel allocation |
US5594732A (en) | 1995-03-03 | 1997-01-14 | Intecom, Incorporated | Bridging and signalling subsystems and methods for private and hybrid communications systems including multimedia systems |
US5617417A (en) | 1994-09-07 | 1997-04-01 | Stratacom, Inc. | Asynchronous transfer mode communication in inverse multiplexing over multiple communication links |
US5655077A (en) | 1994-12-13 | 1997-08-05 | Microsoft Corporation | Method and system for authenticating access to heterogeneous computing services |
US5659542A (en) | 1995-03-03 | 1997-08-19 | Intecom, Inc. | System and method for signalling and call processing for private and hybrid communications systems including multimedia systems |
US5671354A (en) | 1995-02-28 | 1997-09-23 | Hitachi, Ltd. | Method of assisting server access by use of user authentication information held in one of servers and a method of assisting management user account for use of servers |
US5684950A (en) | 1996-09-23 | 1997-11-04 | Lockheed Martin Corporation | Method and system for authenticating users to multiple computer servers via a single sign-on |
US5699521A (en) | 1994-03-30 | 1997-12-16 | Hitachi, Ltd. | Communication system and communication method |
US5737526A (en) | 1994-12-30 | 1998-04-07 | Cisco Systems | Network having at least two routers, each having conditional filter so one of two transmits given frame and each transmits different frames, providing connection to a subnetwork |
US5740171A (en) | 1996-03-28 | 1998-04-14 | Cisco Systems, Inc. | Address translation mechanism for a high-performance network switch |
US5787253A (en) | 1996-05-28 | 1998-07-28 | The Ag Group | Apparatus and method of analyzing internet activity |
US5793763A (en) | 1995-11-03 | 1998-08-11 | Cisco Technology, Inc. | Security system for network address translation systems |
US5802047A (en) | 1995-05-31 | 1998-09-01 | Nec Corporation | Inter-LAN connecting device with combination of routing and switching functions |
US5802316A (en) | 1995-01-26 | 1998-09-01 | Ito; Yuji | Routers connecting LANs through public network |
US5805595A (en) | 1996-10-23 | 1998-09-08 | Cisco Systems, Inc. | System and method for communicating packetized data over a channel bank |
US5815665A (en) | 1996-04-03 | 1998-09-29 | Microsoft Corporation | System and method for providing trusted brokering services over a distributed network |
US5835727A (en) | 1996-12-09 | 1998-11-10 | Sun Microsystems, Inc. | Method and apparatus for controlling access to services within a computer network |
US5838683A (en) | 1995-03-13 | 1998-11-17 | Selsius Systems Inc. | Distributed interactive multimedia system architecture |
US5854901A (en) | 1996-07-23 | 1998-12-29 | Cisco Systems, Inc. | Method and apparatus for serverless internet protocol address discovery using source address of broadcast or unicast packet |
US5856974A (en) * | 1996-02-13 | 1999-01-05 | Novell, Inc. | Internetwork address mapping gateway |
US5867495A (en) | 1996-11-18 | 1999-02-02 | Mci Communications Corporations | System, method and article of manufacture for communications utilizing calling, plans in a hybrid network |
US5883893A (en) | 1996-09-10 | 1999-03-16 | Cisco Technology, Inc. | ATM voice transport protocol |
US5933625A (en) | 1995-12-11 | 1999-08-03 | Akira Sugiyama | Unique time generating device and authenticating device using the same |
US5944824A (en) | 1997-04-30 | 1999-08-31 | Mci Communications Corporation | System and method for single sign-on to a plurality of network elements |
US5959990A (en) | 1996-03-12 | 1999-09-28 | Bay Networks, Inc. | VLAN frame format |
US5991828A (en) | 1993-08-25 | 1999-11-23 | Fujitsu Limited | System for automatically connecting portable device to network using network environment information including domain name of naming device and community name of network management protocol |
US5991810A (en) | 1997-08-01 | 1999-11-23 | Novell, Inc. | User name authentication for gateway clients accessing a proxy cache server |
US6009103A (en) | 1997-12-23 | 1999-12-28 | Mediaone Group, Inc. | Method and system for automatic allocation of resources in a network |
US6011910A (en) | 1997-04-08 | 2000-01-04 | 3Com Corporation | Supporting authentication across multiple network access servers |
US6011909A (en) | 1997-01-06 | 2000-01-04 | Motorola, Inc. | Alerting user engaged in a first communications session on a first network to a request to establish a second communications session on a second network |
US6018770A (en) | 1997-10-13 | 2000-01-25 | Research In Motion Limited | System and method for managing packet-switched connections |
US6021496A (en) | 1997-07-07 | 2000-02-01 | International Business Machines Corporation | User authentication from non-native server domains in a computer network |
US6026086A (en) | 1997-01-08 | 2000-02-15 | Motorola, Inc. | Apparatus, system and method for a unified circuit switched and packet-based communications system architecture with network interworking functionality |
US6026441A (en) | 1997-12-16 | 2000-02-15 | At&T Corporation | Method for establishing communication on the internet with a client having a dynamically assigned IP address |
US6029203A (en) | 1997-09-26 | 2000-02-22 | 3Com Corporation | Apparatus and methods for use therein for an ISDN LAN modem that provides enhanced network activity |
US6028848A (en) | 1997-09-26 | 2000-02-22 | 3Com Corporation | Apparatus and methods for use therein for an ISDN LAN modem utilizing internal DNS and DHCP servers for transparent translation of local host names to IP addresses |
US6047325A (en) | 1997-10-24 | 2000-04-04 | Jain; Lalit | Network device for supporting construction of virtual local area networks on arbitrary local and wide area computer networks |
US6047376A (en) | 1996-10-18 | 2000-04-04 | Toshiba Information Systems (Japan) Corporation | Client-server system, server access authentication method, memory medium stores server-access authentication programs, and issuance device which issues the memory medium contents |
US6055236A (en) | 1998-03-05 | 2000-04-25 | 3Com Corporation | Method and system for locating network services with distributed network address translation |
US6065064A (en) | 1995-10-04 | 2000-05-16 | Kawasaki Steel Corporation | Inter-network connecting device |
US6065049A (en) | 1998-02-04 | 2000-05-16 | 3Com Corporation | Method and system for resolving addresses for network host interfaces from a cable modem |
US6091951A (en) | 1997-05-14 | 2000-07-18 | Telxon Corporation | Seamless roaming among multiple networks |
US6092196A (en) | 1997-11-25 | 2000-07-18 | Nortel Networks Limited | HTTP distributed remote user authentication system |
US6098106A (en) | 1998-09-11 | 2000-08-01 | Digitalconvergence.Com Inc. | Method for controlling a computer with an audio signal |
US6119160A (en) | 1998-10-13 | 2000-09-12 | Cisco Technology, Inc. | Multiple-level internet protocol accounting |
US6141687A (en) | 1998-05-08 | 2000-10-31 | Cisco Technology, Inc. | Using an authentication server to obtain dial-out information on a network |
US6157636A (en) | 1997-03-06 | 2000-12-05 | Bell Atlantic Network Services, Inc. | Network session management with gateway-directory services and authorization control |
US6160808A (en) | 1997-12-18 | 2000-12-12 | 3Com Corporation | Technique for transmitting incoming multi-link point-to-point (PPP) packet traffic over multiple outgoing links in a multi-link bundle |
US6226678B1 (en) | 1995-09-25 | 2001-05-01 | Netspeak Corporation | Method and apparatus for dynamically defining data communication utilities |
US6269099B1 (en) | 1998-07-01 | 2001-07-31 | 3Com Corporation | Protocol and method for peer network device discovery |
US6317594B1 (en) | 1996-09-27 | 2001-11-13 | Openwave Technologies Inc. | System and method for providing data to a wireless device upon detection of activity of the device on a wireless network |
US6381646B2 (en) * | 1998-11-03 | 2002-04-30 | Cisco Technology, Inc. | Multiple network connections from a single PPP link with partial network address translation |
US6490289B1 (en) * | 1998-11-03 | 2002-12-03 | Cisco Technology, Inc. | Multiple network connections from a single PPP link with network address translation |
US6674758B2 (en) * | 2002-06-06 | 2004-01-06 | Clinton Watson | Mechanism for implementing voice over IP telephony behind network firewalls |
US6721329B1 (en) * | 1997-11-04 | 2004-04-13 | Koninklijke Philips Electronics N.V. | Communication network using different transmission properties |
US6822957B1 (en) * | 1998-03-05 | 2004-11-23 | 3Com Corporation | Distributed network address translation for a network telephony system |
US6822955B1 (en) * | 1998-01-22 | 2004-11-23 | Nortel Networks Limited | Proxy server for TCP/IP network address portability |
-
2002
- 2002-04-04 US US10/117,801 patent/US7443865B1/en active Active
Patent Citations (70)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US4922486A (en) | 1988-03-31 | 1990-05-01 | American Telephone And Telegraph Company | User to network interface protocol for packet communications networks |
US5136580A (en) | 1990-05-16 | 1992-08-04 | Microcom Systems, Inc. | Apparatus and method for learning and filtering destination and source addresses in a local area network system |
US5280480A (en) | 1991-02-21 | 1994-01-18 | International Business Machines Corporation | Source routing transparent bridge |
US5274631A (en) | 1991-03-11 | 1993-12-28 | Kalpana, Inc. | Computer network switching system |
US5570361A (en) | 1992-02-19 | 1996-10-29 | Fujitsu Limited | Apparatus and a method for supervising and controlling ATM traffic |
US5423002A (en) | 1992-04-20 | 1995-06-06 | 3Com Corporation | System for extending network resources to remote networks |
US5241594A (en) | 1992-06-02 | 1993-08-31 | Hughes Aircraft Company | One-time logon means and methods for distributed computing systems |
US5991828A (en) | 1993-08-25 | 1999-11-23 | Fujitsu Limited | System for automatically connecting portable device to network using network environment information including domain name of naming device and community name of network management protocol |
US5430715A (en) | 1993-09-15 | 1995-07-04 | Stratacom, Inc. | Flexible destination address mapping mechanism in a cell switching communication controller |
US5699521A (en) | 1994-03-30 | 1997-12-16 | Hitachi, Ltd. | Communication system and communication method |
US5673265A (en) | 1994-05-19 | 1997-09-30 | Integrated Network Corporation | Scalable multimedia network |
US5740176A (en) | 1994-05-19 | 1998-04-14 | Dagaz Technologies, Inc. | Scalable multimedia network |
US5799017A (en) | 1994-05-19 | 1998-08-25 | Cisco Technology, Inc. | Scalable multimedia network |
US5555244A (en) | 1994-05-19 | 1996-09-10 | Integrated Network Corporation | Scalable multimedia network |
US5617417A (en) | 1994-09-07 | 1997-04-01 | Stratacom, Inc. | Asynchronous transfer mode communication in inverse multiplexing over multiple communication links |
US5655077A (en) | 1994-12-13 | 1997-08-05 | Microsoft Corporation | Method and system for authenticating access to heterogeneous computing services |
US5592470A (en) | 1994-12-21 | 1997-01-07 | At&T | Broadband wireless system and network architecture providing broadband/narrowband service with optimal static and dynamic bandwidth/channel allocation |
US5737526A (en) | 1994-12-30 | 1998-04-07 | Cisco Systems | Network having at least two routers, each having conditional filter so one of two transmits given frame and each transmits different frames, providing connection to a subnetwork |
US5802316A (en) | 1995-01-26 | 1998-09-01 | Ito; Yuji | Routers connecting LANs through public network |
US5671354A (en) | 1995-02-28 | 1997-09-23 | Hitachi, Ltd. | Method of assisting server access by use of user authentication information held in one of servers and a method of assisting management user account for use of servers |
US5659542A (en) | 1995-03-03 | 1997-08-19 | Intecom, Inc. | System and method for signalling and call processing for private and hybrid communications systems including multimedia systems |
US5594732A (en) | 1995-03-03 | 1997-01-14 | Intecom, Incorporated | Bridging and signalling subsystems and methods for private and hybrid communications systems including multimedia systems |
US5838683A (en) | 1995-03-13 | 1998-11-17 | Selsius Systems Inc. | Distributed interactive multimedia system architecture |
US5583862A (en) | 1995-03-28 | 1996-12-10 | Bay Networks, Inc. | Method and apparatus for routing for virtual networks |
US5802047A (en) | 1995-05-31 | 1998-09-01 | Nec Corporation | Inter-LAN connecting device with combination of routing and switching functions |
US6226678B1 (en) | 1995-09-25 | 2001-05-01 | Netspeak Corporation | Method and apparatus for dynamically defining data communication utilities |
US6065064A (en) | 1995-10-04 | 2000-05-16 | Kawasaki Steel Corporation | Inter-network connecting device |
US5793763A (en) | 1995-11-03 | 1998-08-11 | Cisco Technology, Inc. | Security system for network address translation systems |
US5933625A (en) | 1995-12-11 | 1999-08-03 | Akira Sugiyama | Unique time generating device and authenticating device using the same |
US5856974A (en) * | 1996-02-13 | 1999-01-05 | Novell, Inc. | Internetwork address mapping gateway |
US5959990A (en) | 1996-03-12 | 1999-09-28 | Bay Networks, Inc. | VLAN frame format |
US5740171A (en) | 1996-03-28 | 1998-04-14 | Cisco Systems, Inc. | Address translation mechanism for a high-performance network switch |
US5815665A (en) | 1996-04-03 | 1998-09-29 | Microsoft Corporation | System and method for providing trusted brokering services over a distributed network |
US5787253A (en) | 1996-05-28 | 1998-07-28 | The Ag Group | Apparatus and method of analyzing internet activity |
US5854901A (en) | 1996-07-23 | 1998-12-29 | Cisco Systems, Inc. | Method and apparatus for serverless internet protocol address discovery using source address of broadcast or unicast packet |
US5883893A (en) | 1996-09-10 | 1999-03-16 | Cisco Technology, Inc. | ATM voice transport protocol |
US5684950A (en) | 1996-09-23 | 1997-11-04 | Lockheed Martin Corporation | Method and system for authenticating users to multiple computer servers via a single sign-on |
US6317594B1 (en) | 1996-09-27 | 2001-11-13 | Openwave Technologies Inc. | System and method for providing data to a wireless device upon detection of activity of the device on a wireless network |
US6047376A (en) | 1996-10-18 | 2000-04-04 | Toshiba Information Systems (Japan) Corporation | Client-server system, server access authentication method, memory medium stores server-access authentication programs, and issuance device which issues the memory medium contents |
US5805595A (en) | 1996-10-23 | 1998-09-08 | Cisco Systems, Inc. | System and method for communicating packetized data over a channel bank |
US5867495A (en) | 1996-11-18 | 1999-02-02 | Mci Communications Corporations | System, method and article of manufacture for communications utilizing calling, plans in a hybrid network |
US5835727A (en) | 1996-12-09 | 1998-11-10 | Sun Microsystems, Inc. | Method and apparatus for controlling access to services within a computer network |
US6011909A (en) | 1997-01-06 | 2000-01-04 | Motorola, Inc. | Alerting user engaged in a first communications session on a first network to a request to establish a second communications session on a second network |
US6026086A (en) | 1997-01-08 | 2000-02-15 | Motorola, Inc. | Apparatus, system and method for a unified circuit switched and packet-based communications system architecture with network interworking functionality |
US6157636A (en) | 1997-03-06 | 2000-12-05 | Bell Atlantic Network Services, Inc. | Network session management with gateway-directory services and authorization control |
US6011910A (en) | 1997-04-08 | 2000-01-04 | 3Com Corporation | Supporting authentication across multiple network access servers |
US5944824A (en) | 1997-04-30 | 1999-08-31 | Mci Communications Corporation | System and method for single sign-on to a plurality of network elements |
US6091951A (en) | 1997-05-14 | 2000-07-18 | Telxon Corporation | Seamless roaming among multiple networks |
US6021496A (en) | 1997-07-07 | 2000-02-01 | International Business Machines Corporation | User authentication from non-native server domains in a computer network |
US5991810A (en) | 1997-08-01 | 1999-11-23 | Novell, Inc. | User name authentication for gateway clients accessing a proxy cache server |
US6028848A (en) | 1997-09-26 | 2000-02-22 | 3Com Corporation | Apparatus and methods for use therein for an ISDN LAN modem utilizing internal DNS and DHCP servers for transparent translation of local host names to IP addresses |
US6029203A (en) | 1997-09-26 | 2000-02-22 | 3Com Corporation | Apparatus and methods for use therein for an ISDN LAN modem that provides enhanced network activity |
US6018770A (en) | 1997-10-13 | 2000-01-25 | Research In Motion Limited | System and method for managing packet-switched connections |
US6047325A (en) | 1997-10-24 | 2000-04-04 | Jain; Lalit | Network device for supporting construction of virtual local area networks on arbitrary local and wide area computer networks |
US6721329B1 (en) * | 1997-11-04 | 2004-04-13 | Koninklijke Philips Electronics N.V. | Communication network using different transmission properties |
US6092196A (en) | 1997-11-25 | 2000-07-18 | Nortel Networks Limited | HTTP distributed remote user authentication system |
US6026441A (en) | 1997-12-16 | 2000-02-15 | At&T Corporation | Method for establishing communication on the internet with a client having a dynamically assigned IP address |
US6160808A (en) | 1997-12-18 | 2000-12-12 | 3Com Corporation | Technique for transmitting incoming multi-link point-to-point (PPP) packet traffic over multiple outgoing links in a multi-link bundle |
US6009103A (en) | 1997-12-23 | 1999-12-28 | Mediaone Group, Inc. | Method and system for automatic allocation of resources in a network |
US6822955B1 (en) * | 1998-01-22 | 2004-11-23 | Nortel Networks Limited | Proxy server for TCP/IP network address portability |
US6065049A (en) | 1998-02-04 | 2000-05-16 | 3Com Corporation | Method and system for resolving addresses for network host interfaces from a cable modem |
US6055236A (en) | 1998-03-05 | 2000-04-25 | 3Com Corporation | Method and system for locating network services with distributed network address translation |
US6822957B1 (en) * | 1998-03-05 | 2004-11-23 | 3Com Corporation | Distributed network address translation for a network telephony system |
US6141687A (en) | 1998-05-08 | 2000-10-31 | Cisco Technology, Inc. | Using an authentication server to obtain dial-out information on a network |
US6269099B1 (en) | 1998-07-01 | 2001-07-31 | 3Com Corporation | Protocol and method for peer network device discovery |
US6098106A (en) | 1998-09-11 | 2000-08-01 | Digitalconvergence.Com Inc. | Method for controlling a computer with an audio signal |
US6119160A (en) | 1998-10-13 | 2000-09-12 | Cisco Technology, Inc. | Multiple-level internet protocol accounting |
US6381646B2 (en) * | 1998-11-03 | 2002-04-30 | Cisco Technology, Inc. | Multiple network connections from a single PPP link with partial network address translation |
US6490289B1 (en) * | 1998-11-03 | 2002-12-03 | Cisco Technology, Inc. | Multiple network connections from a single PPP link with network address translation |
US6674758B2 (en) * | 2002-06-06 | 2004-01-06 | Clinton Watson | Mechanism for implementing voice over IP telephony behind network firewalls |
Non-Patent Citations (13)
Title |
---|
"NAT and Networks", Sep. 19, 1998, pp. 1-12. |
Active Software, Inc. "Active Software's Integration System", Jul. 24, 1998. |
Ascend Communications, Inc., "Remote Access Network Security", Jul. 24, 1998, pp. 1-8. |
Ascend Communications, Inc., Access Control Product Information, 1997, 4 pages. |
D. Carrel et al., Network Working Group, Cisco Systems, "The TACACS+ Protocol Version 1.78", Jan. 1997, pp. 1-40. |
Droms, R., "Dynamic Host Configuration Protocol", Bucknell University, Network Working Group, Oct. 1993, pp. 1-35. |
Mecklermedia Corporation, NAT-PC Webopaedia Definition and Links, "NAT", Sep. 19, 1998. |
Mecklermedia Corporation, PC Webopaedia Definition and Links, "L2TP", Sep. 21, 1998. |
Mecklermedia Corporation, PC Webopaedia Definition and Links, "Tunneling", Sep. 21, 1998. |
NAT Information, "Network Address Translation Information", Sep. 19, 1998, pp. 1-2. |
Perkins, D., "Requirements for an Internet Standard Point-to-Point Protocol", Carnegie Mellon University, Network Working Group, Dec. 1993, pp. 1-19. |
Simpson, W., "The Point-to-Point Protocol (PPP)", Daydreamer, Network Working Group, Dec. 1993, pp. 1-53. |
Valencia, et al., "Layer Two Tunneling Protocol L2TP", PPP Working Group, May 1998, pp. 1-68. |
Cited By (9)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20050015496A1 (en) * | 2003-07-14 | 2005-01-20 | Microsoft Corporation | Virtual connnectivity with local connection translation |
US20050015427A1 (en) * | 2003-07-14 | 2005-01-20 | Microsoft Corporation | Virtual connectivity with subscribe-notify service |
US7581010B2 (en) | 2003-07-14 | 2009-08-25 | Microsoft Corporation | Virtual connectivity with local connection translation |
US7769866B2 (en) * | 2003-07-14 | 2010-08-03 | Microsoft Corporation | Virtual connectivity with subscribe-notify service |
US20110085552A1 (en) * | 2009-10-14 | 2011-04-14 | Electronics And Telecommunications Research Institute | System and method for forming virtual private network |
US9021133B1 (en) * | 2013-06-25 | 2015-04-28 | Google Inc. | Fabric network |
US20150127735A1 (en) * | 2013-06-25 | 2015-05-07 | Google Inc. | Fabric network |
US9923801B2 (en) | 2013-06-25 | 2018-03-20 | Google Llc | Fabric network |
US10693760B2 (en) | 2013-06-25 | 2020-06-23 | Google Llc | Fabric network |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US6490289B1 (en) | Multiple network connections from a single PPP link with network address translation | |
US6381646B2 (en) | Multiple network connections from a single PPP link with partial network address translation | |
US6801528B2 (en) | System and method for dynamic simultaneous connection to multiple service providers | |
US8488569B2 (en) | Communication device | |
US6934754B2 (en) | Methods and apparatus for processing network data transmissions | |
US6697864B1 (en) | Login architecture for network access through a cable system | |
JP2003273935A (en) | Network-connecting apparatus and method for providing direct connection between network devices in different private networks | |
US7420973B2 (en) | Context selection in a network element through subscriber flow switching | |
US7443865B1 (en) | Multiple network connections from a single PPP link with network address translation | |
KR100604566B1 (en) | VPN service provisioning method using session agent | |
US6829235B1 (en) | Telecommunications network with parallel session function | |
Cisco | Configuring Protocol Translation and Virtual Asynchronous Devices | |
CN111162976B (en) | Campus network PPPoE proxy dialing method and device | |
Cisco | Configuring Media-Independent PPP and Multilink PPP | |
Cisco | Protocol Translation Session Commands | |
Cisco | Protocol Translation Session Commands | |
Cisco | Protocol Translation Session Commands | |
Cisco | Protocol Translation Configuration Commands | |
Cisco | Protocol Translation Configuration Commands | |
Cisco | Protocol Translation Configuration Commands | |
Cisco | Protocol Translation Session Commands | |
Cisco | Protocol Translation Session Commands | |
Cisco | Protocol Translation Session Commands | |
Cisco | Protocol Translation Session Commands | |
Cisco | Protocol Translation Configuration Commands |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
AS | Assignment |
Owner name: CISCO TECHNOLOGY, INC., CALIFORNIA Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:ZHANG, SHUJIN;JIN, JANE JIAYING;CHU, JIE;AND OTHERS;REEL/FRAME:021505/0646 Effective date: 19981125 |
|
STCF | Information on status: patent grant |
Free format text: PATENTED CASE |
|
FPAY | Fee payment |
Year of fee payment: 4 |
|
FPAY | Fee payment |
Year of fee payment: 8 |
|
MAFP | Maintenance fee payment |
Free format text: PAYMENT OF MAINTENANCE FEE, 12TH YEAR, LARGE ENTITY (ORIGINAL EVENT CODE: M1553); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY Year of fee payment: 12 |